attackstr 0.2.0

Grammar-based security payload generation — TOML-driven, composable, encoding-aware
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68

import re

with open("src/adversarial_tests.rs", "r") as f:
    content = f.read()

# Fix invalid_confidence_values
content = content.replace(
'''    fn invalid_confidence_values() {
        let mut db = PayloadDb::new();
        let _ = db.load_toml(
            r#"
[grammar]
name = "bad-confidence"
sink_category = "conf-cat"

[[techniques]]
name = "t1"
template = "test"
confidence = 999.9

[[techniques]]
name = "t2"
template = "test2"
confidence = -5.0
"#,
        );

        let payloads = db.payloads("conf-cat");
        // Engine accepts any f64, validation should catch this
        // First clone the payloads to avoid borrow issues
        let payload_count = payloads.len();
        for p in payloads {
            println!("Technique {} has confidence {}", p.technique, p.confidence);
        }

        let issues = validate(&get_first_grammar(&db));
        let bad_conf = issues.iter().any(|i| i.message.contains("confidence"));
        assert!(
            bad_conf,
            "Validation should catch invalid confidence values"
        );

        assert_eq!(payload_count, 2);
    }''',
'''    fn invalid_confidence_values() {
        let mut db = PayloadDb::new();
        let result = db.load_toml(
            r#"
[grammar]
name = "bad-confidence"
sink_category = "conf-cat"

[[techniques]]
name = "t1"
template = "test"
confidence = 999.9

[[techniques]]
name = "t2"
template = "test2"
confidence = -5.0
"#,
        );
        assert!(result.is_err(), "Loading should fail due to invalid confidence");
    }''')

with open("src/adversarial_tests.rs", "w") as f:
    f.write(content)